KVM: SVM: Fix AVIC Physical ID table UAF

[PATCH v2 0/3] KVM: SVM: Fix AVIC Physical ID table UAF

Sean Christopherson posted 3 patches 21 hours ago

Download series mbox

arch/x86/kvm/svm/avic.c | 22 ++++++++++++++++------
arch/x86/kvm/svm/svm.c  |  6 +++++-
arch/x86/kvm/svm/svm.h  |  1 +
3 files changed, 22 insertions(+), 7 deletions(-)

Expand all Fold all

[PATCH v2 0/3] KVM: SVM: Fix AVIC Physical ID table UAF

Posted by Sean Christopherson 21 hours ago

Naveen's fix to clear AVIC Physical ID table entries if vCPU creation fails,
to ensure the CPU doesn't access the freed virtual  APIC state.

v2: Add prep patches to consolidate the table bounds checks.

v1: https://lore.kernel.org/all/20260903062856.2090499-1-naveen@kernel.org

Naveen N Rao (1):
  KVM: SVM: Clear AVIC Physical ID table entry if vCPU creation fails

Sean Christopherson (2):
  KVM: SVM: Add paranoid helper for checking if vCPU is AVIC-addressable
  KVM: SVM: Use "is AVIC-addressable" helper to sanity check
    load()/put()

 arch/x86/kvm/svm/avic.c | 22 ++++++++++++++++------
 arch/x86/kvm/svm/svm.c  |  6 +++++-
 arch/x86/kvm/svm/svm.h  |  1 +
 3 files changed, 22 insertions(+), 7 deletions(-)


base-commit: d4b7fb647204f0c81dfeae2d1a708e4d858e0c94
-- 
2.55.0.1082.g2b9226bbc0-goog